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AMENfDMENT TO THE CLAIMS 

M. (Canceled) 

5. (Previously Presented) A method of authenticating a user of a client computer at a server 
computo- executing a distributed application on a plurality of first data processing agents, 
comprising the steps of: 

receiving a first service request from the user at one of the plurality of first data processing 

agent; 

submitting an authentication request from the one of the plurality of first data processing 
agent to a second data processing agent to authenticate the user; 

authenticating the user at the second data processing agent; 

if the user is successfiilly authenticated, storing a first timeout value indicative of a 
predetermined first time period on the second data processing agent; 

detennining whether the predetermined first time period is exceeded; 

if the predetermined first time period is exceeded without receivuig a second service request 
from the tiser^ requiring the user to be authenticated at the second data processing agent upon receipt 
of the second service request; and 

if tiie second service request is received from the user at another of the plurality of first data 
processing agents before the first time period is exceeded, restarting the first timeout value. 

6. (Previously Presented) The method of claim 5, ftulher including the steps of receiving the second 
service request fix>m the user, and detenninrng whether the first predetermined time period is 
exceeded. 

7. (Previously Presented) The method of claim 5, further including the steps of receiving the second 
service request fixMn the user at the one of the plurality of first data processing agents, transmitting a 
message from the one of the plurality of first data processing agents to the second data processing 
agent including a notification that the second service request is received, receiving the notification at 
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the second data processing agent, and determining v^iiether the predeteiroined time period is 
exceeded. 

8. (Previously Presented) A system for airthenticating a user of a client computer at a server 
computer executing a distributed ^plication on a plurality of data processing agents, the system 
comprising: 

a server including a plurality of first data processing agents for receiving service requests 
jBcom the user and a second data processing agent for authenticating the user, 

wheiein each of the plurality of first data processing agents is configured to submit an 
authentication request to the second data processing agent to authenticate flie user, 

wherein the second data processing agent is configured to receive the authentication request, 
atteri^>t to authenticate the user, store a first timeout value indicative of a first predetermined time 
period if the user is successfiilly authenticated, aud determine whedier the first predetermined time 
period is exceeded, 

wherein each of the plm:ality of first data processing agents is further configured to notify 
the second data processing agent if a second service request is received icom the user, and the 
second data processing agent is configured to restart the first timeout value in response to receiving 
the notification after receiving a previous notification, relative to the user, ftom another one of the 
first data processing agents, 

wherein each of the plurality of first data processing agents is further configured to reqxiire 
the user to be re-authenticated at the second data processing agent upon receifrt of a second seryice 
request if the first predetermined time period is exceeded before the second service request is 
received, 

9-11. (Canceled) 

12-15. (Canceled) 

16. (Previously Presented) The method of claim 5, farther comprising the steps of: 
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receiving the secord service request from the user at the other first data processing agent; 

and 

transmitting a message from the other first data processing agent to the second data 
processing agent indicating receipt of the second service request from the user, and 

wherein the step of resetting the timeout period is responsive to receipt of the message 
indicating receipt of the second service request fix)m the user. 

17. (Previously Presented) The method of claim 5, fiirther comprising the steps of: 

if the user is successfijUy authenticated, storing a second timeout value mdicative of a 
second predetermined time period on at lea$t one of the plurality of first data processing agents; and 

if the at least one of the plurality of first data processing agents receives the second service 
request before the second timeout period is exceeded: 

restarting the second timeout period stored on at least the second data processing 
agent that received the second service request; and 

providing the requested service to the user without requiring the user to be 
authenticated at tfie second data processing agent upon receipt of the second service request 

1 8. (Previously Presented) The mediod of claim 1 7, wherein the second predetermined time period 
is less than the first predetemiined time period. 

19. (Previously Presented) Tbe method of claim 1 7, fiirther comprising the step of inputting the 
second timeout value from the user. 

20. (Previously Presented) The method of claim 5, fiulher comprising the step of inputting the first 
timeout value from the user, 

21. (Previously Presented) The system of claim 8, wherein at leost one of the plurahty of first data 
processing agents is configured to: 
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Store a second timeout value indicative of a second predetermined time period if the user is 
successftilly authenticated; and 

if the least one of the plurality of first data processing agents receives the second service 
request before the second predetemained timeout period is exceeded: 
restart the second timeout value; and 

provide the requested service to the user without requiring the user to be 
authenticated at the second data processing agent upon receipt of the second service request. 

22. (Previously Presented) The system of claim 21, wherein the second predetermined tune period is 
less than the first predetermined time period, 

23. CPreviously Presented) The system of claim 22, wherein at least one of the plurality of first data 
processing agents is configured to receive the second timeout value firom the user. 

24. (Previously Presented) The system of claim 22, wherein the second data processing agent is 
configured to receive the second timeout value ft^om the user. 
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